haui_lemmy

joined 11 months ago

im daily driving the pinetime on a postmarketos phone. it is glorious. but you kinda need to want to stick it to the man for maximum pleasure because thats whst youre doing. thats how it feels to me anyway.

 

Hi folks, not sure if this is the right place but so please lmk if there is a better place to put this:

I'm currently attempting to reverse engineer yealink t41p IP phone firmware since the device is out of support for some years and but works very well imo. For security reasons and keeping the devices out of the trash, I would like to provide open source firmware for it. I recently learned how the process with clean room reversing works but I'm stumbling at the first step already. Here is what I attempted so far:

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk --signature T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk -E T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     ENTROPY
--------------------------------------------------------------------------------
16384         0x4000          Rising entropy edge (0.984980)
20480         0x5000          Falling entropy edge (0.783278)
32768         0x8000          Rising entropy edge (0.992664)
45056         0xB000          Falling entropy edge (0.601562)
65536         0x10000         Rising entropy edge (0.991434)
815104        0xC7000         Rising entropy edge (0.992069)
2945024       0x2CF000        Falling entropy edge (0.668870)
2949120       0x2D0000        Rising entropy edge (0.993514)
8155136       0x7C7000        Falling entropy edge (0.843171)

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk -BE T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------


DECIMAL       HEXADECIMAL     ENTROPY
--------------------------------------------------------------------------------
16384         0x4000          Rising entropy edge (0.984980)
20480         0x5000          Falling entropy edge (0.783278)
32768         0x8000          Rising entropy edge (0.992664)
45056         0xB000          Falling entropy edge (0.601562)
65536         0x10000         Rising entropy edge (0.991434)
815104        0xC7000         Rising entropy edge (0.992069)
2945024       0x2CF000        Falling entropy edge (0.668870)
2949120       0x2D0000        Rising entropy edge (0.993514)
8155136       0x7C7000        Falling entropy edge (0.843171)

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk -y T41-36.83.0.160.rom 
haui@TowerPC:~/Downloads/t41p-firmware$ binwalk -e T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk -I T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
12622         0x314E          BFF volume entry, AIXv3, file name: "iX2jÅ

haui@TowerPC:~/Downloads/t41p-firmware$ binw^C

haui@TowerPC:~/Downloads/t41p-firmware$ binwalk -G T41-36.83.0.160.rom 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------

Insane work. My dollar a week is obviously well spent on you. :)

Not sure if thats what you‘re asking but you can do this: https://mastodon.giftedmc.com/@haui111@peertube.giftedmc.com

Neat. I didnt know but it makes sense I guess.

[–] haui_lemmy@lemmy.giftedmc.com 20 points 1 week ago (6 children)

You will probably get the best answers from the peertube community so I suggest you crosspost your question there.

That said, I host a peertube instance. It is the same as any other fediverse service but it is very young so dont expect it to be on par with mastodon and lemmy in terms of usability.

As with all other services, you can make an account on an instance, seeing only what that instance allows you to, either by specifically allowing or disallowing other servers.

So if you want the user experience, check joinpeertube.org for a rather well connected (and or maybe large) instance and join if you want to upload content. If not, you can just use your mastodon account to follow creators or comment on their videos.

If you want freedom to do as you please, you need to get a server that is online (as in not in your home network or at least exposed but treat with caution). You can then install a peertube instance of your own, ideally with a custom domain. Then you can join the network and federate with who and whatever you like.

In any case, framatube is a great company imo but their marketing just isnt that good. Peertube has so much potential and it could be further along by now.

But dont get me wrong. It is still great and here to stay.

Good luck.

I really enjoyed reading your take. Thanks for posting it. IP is theft.

That was unexpected.

[–] haui_lemmy@lemmy.giftedmc.com 1 points 1 week ago (1 children)

I did quite some reading in my time, as I mentioned. The methods you are describing are riddled with ifs and buts. The reality is that even online systems arent hacked if they dont have obvious flaws like passwords in root ssh. on the other hand tools like john the ripper can break each and every common encryption given the right circumstances. Its no difference. Its all just marketing.

[–] haui_lemmy@lemmy.giftedmc.com 1 points 1 week ago (3 children)

I‘m not that bad at rhetoric either but I avoid it when I can.

Your argument is empty. Privilege escalation attacks are plain old cves that get found, evaluated and fixed. You need access to the phone, mostly in an unlocked state to get anything to work like that, same as with a computer.

I know a couple of pen testers and I would definitely know if there were large differences between operating systems securitywise.

[–] haui_lemmy@lemmy.giftedmc.com 1 points 1 week ago (5 children)

You do realize that this is bullshit, right?

Its typical fearmongering (in fact the same article too) that I have been sent a ton of times by low tech users that fanboy for graphene.

There is no such thing as „physical port attacks“. It also works very different on phones then on computers. You can for example use i2c on an iphone to crack it open which somewhat straightforward to do but still has zero implications for daily use. The linux apps are desktop apps and as such dont have any chance to get through all of the open source community‘s eyes undetected.

Its a completely backwards take that assumes using bad faith software written in the dark by proprietary vendors which just isnt real.

Fair enough. In bad times, that is true for me as well. But these times pass eventually. At least they always have in the past.

 

Hi folks! First of all, huge appreciation for this insane lemmy client. I‘ve been using it for two years roughly and I‘m over the moon about it.

I want this app to be even more wonderful so I wanted to share my idea for a more integrated search:

Currently, when you‘re on a small instance like mine, you dont see every community on every server you are connected to due to the way AP works.

For that reason, I would love to see all communities and be able to subscribe to them by using lemmyverse.net as a search option.

Steps to reproduce

  1. make new instance
  2. add user
  3. connect with voyager
  4. type anything in the search bar
  5. find nothing

Btw I know we already have the „discover“ option but it works different from what I‘m suggesting and is less intuitive and more cluttered than my approach imo.

Suggested behavior

  1. You hit search and get „lemmyverse.net“ as a search option
  2. click it
  3. see all communities with the content you searched for
  4. hit subscribe
  5. get content

I hope this makes sense to you as I think this will boost the discoverability of lemmy by a huge margin! This would also probably be a unique feature, setting voyager even more apart from other clients (and of course be a great role model for them to follow).

Thanks for reading and have a good one.

 

shared from: https://lemmy.giftedmc.com/post/701784

The peertube kodi addon has been unavailable for a long time and it's sad because peertube has a lot of cool videos.

That's why I decided to make a new one for the python 3 generation of kodi. It is available on the official repository under "next gen peertube addon" or plugin.video. pt

The app is pretty basic but works (tested on kodi for linux). Disclaimer: For some reason, the libreelec version of kodi does not seem to work with it yet. I'm troubleshooting the issue atm.

Feel free to download and test the app, check the source on github and leave a star or support the project if you wish.

 

cross-posted from: https://lemmit.online/post/3679280

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/dataisbeautiful by /u/xtaberry on 2024-08-14 22:27:25+00:00.

 

cross-posted from: https://lemmy.giftedmc.com/post/669265

Today I encountered something new and dystopian:

You can airplay from your iphone to an appletv but now youtube drops and locks the quality at 360p, making the content unwatchable on larger screens.

Once you disable airplay, the quality jumps back to 1080p. If you choose 1080p before and enable airiplay after, it still changes.

This hasnt been an issue for years. this new anti consumer move prompted me to order another raspberry pi to put kodi on.

 

Hi folks,

since the only kodi specific communities are on the two biggest instances, I went ahead and created a new one on my small instance. !addons4kodi@lemmy.giftedmc.com

It has been around for many months and has strong uptime so please consider it here to stay. I will work on the visuals soon.

Feel free to check it out and post in it.

Have a nice day.

12
submitted 3 months ago* (last edited 3 months ago) by haui_lemmy@lemmy.giftedmc.com to c/lemmy_support@lemmy.ml
 

I'm experiencing some odd behavior. Lemmy communities on my server seem to have stalled (no new posts and or comments) since 2 days.

I went ahead and upgraded lemmy to 0.19.5 and postgres to the current version but to no avail so far.

.ml got banned by fail2ban but I set it on the ignore list now. any ideas where to start looking for the problems? I checked for the other big communities and they're okay it seems.

I can of course start adding logs in here but I would love to know which service or log I should start with.

Thanks for reading. Have a good one.

Edit: outgoing federation works. this post made it to ml in seconds.

 

cross-posted from: https://literature.cafe/post/10510968

Alzheimer’s Breakthrough: Researchers Discover Novel Way To Potentially Halt Disease Progression

This study focuses on the manipulation of the plexin-B1 protein to enhance the brain’s ability to clear amyloid plaques in Alzheimer’s disease, opening avenues for future therapeutic strategies to potentially halt the progression of the disease

https://www.nature.com/articles/s41593-024-01664-w

 

Hi! I'm knee deep into a Medieval Dynasty Playthrough with a couple of friends and as usual I feel the urge to use spreadsheets with this type of games.

There are a couple of very cool resources out there but some are outdated and I dont want to search forever until I find one that is well maintained.

Does anyone know if the prices of the items are stored somewhere in a readable format? If so, feel free to let me know where. I went through the files on my linux steam install but aside from some texts I havent found anything useful so far.

Thanks for reading. Have a good one.

 

cross-posted from: https://literature.cafe/post/10359040

Scientists Pinpoint Main Cause of Sensory Hypersensitivity in Autism

This study has identified the anterior cingulate cortex (ACC) as a key area in the brain responsible for sensory hypersensitivity in autism spectrum disorders. Utilizing a mouse model with a Grin2b gene mutation, heightened neural activity and connectivity in the ACC was observed. Suppressing this hyperactivity normalized the sensory hypersensitivity, offering new insights into treatment options

https://www.nature.com/articles/s41380-024-02572-y (open access)

 

cross-posted from: https://lemmy.world/post/15666607

Non-invasive zaps to the spinal cord can treat paralysis—but no one knows why

 

cross-posted from: https://lemmy.world/post/14945997

The Pedants Club

Author IG

view more: next ›